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Amendments to the Claims; 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

Listing of Claims; 

1. (Currently amended) A method, implemented at least in part by a computing 
apparatus, of detecting executable code embedded in an Extensible Markup Language (XML) 
document, comprising: 

applying Extensible Markup Language (XML) markup to a computer-generated 

document; 

locating an executable code embedded in the document; and 

applying an attribute to a root level element of the XML markup for notifying a 
subsequent application of the presence of the embedded executable code; 

wherein the atti-ibute comprises a flag s tructur e that enables the subsequent application to 
reject the embedded code within the XML document when the XML document is opened 
indicat e s one of th e following: 

a r e j e ction of th e XML docum e nt by th e subs e qu e nt application; and 

a continuation of parsing th e XML documont by th e subs e qu e nt application . 

2. (Original) The method of Claim 1, further comprising: 
passing the document to the subsequent application; 

parsing the XML markup by the subsequent application to locate the attribute applied to 
the root level element of the XML markup applied to the document. 

3. (Original) The method of Claim 2, whereby if the attribute is located by the 
subsequent application, rejecting the document as corrupted by the embedded executable code. 

4. (Original) The method of Claim 2, whereby if the attribute is located, 
determining whether the embedded executable code associated with the attribute requires 
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rejection of the document, and if not, continuing to parse the XML markup of the document by 
the subsequent application. 

5. (Original) The method of Claim 2, whereby parsing the XML markup by the 
subsequent application includes locating the executable code embedded in the document; 

determining by the subsequent application whether an attribute is present for notifying 
the subsequent application of the presence of the executable code; and 
if the attribute is not present, then rejecting the executable code. 

6. (Original) The method of Claim 2, whereby the attribute is a macros present 
attribute for indicating the presence of VBA code in the document. 

7. (Original) The method of Claim 6, whereby the macros present attribute has a 
value of "yes" where an XML markup element is in the document containing the VBA code. 

8. (Original) The method of Claim 7, whereby the macros present attribute has a 
value of "no" indicating that no XML element is in the file containing the VBA code. 

9. (Original) The method of Claim 2, whereby the attribute is an embedded object 
present attribute indicating the presence of one or more OLE objects in the docimient. 

10. (Original) The method of Claim 9, whereby the embedded object present 
attribute has a value of "yes" indicating the presence of at least one XML element in the 
document containing data associated with an OLE object. 

11. (Original) The method of Claim 10, whereby the embedded object present 
attribute has a value of "no" indicating that there are no XML elements in the file containing data 
associated with an OLE object. 
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12. (Original) The method of Claim 2, whereby the attribute is an OCX present 
attribute indicating the presence of OCX objects in the document. 

13. (Original) The method of Claim 12, whereby the OCX present object has a value 
of "yes" indicating that the presence of at least one XML element in the document containing 
data associated with an OCX object. 

14. (Original) The method of Claim 13, whereby the OCX present object has a value 
of "no" indicating that there are no XML elements in the document containing data associated 
with an OCX object. 

15. (Currently amended) A m e thod of system for detecting executable code 
embedded in an Extensible Markup Language (XML) document, comprising: 

a memory storage; and 

a processing unit coupled to the memory storage, wherein the processing unit is operative 

to: 

applying apply Extensible Markup Language (XML) markup to a computer-generated 
document; 

locating locate an executable code embedded in the document; 
applying a pply an attribute to a root level element of the XML markup for notifying a 
subsequent application of the presence of the embedded executable code; 
passing pass the document to the subsequent application; 

parsing parse the XML markup by the subsequent application to locate the attribute 
applied to the root level element of the XML markup applied to the document; and 

if the attribute is located by the subsequent application, r e j e cting reject the docviment as 
corrupted by the embedded executable code; 

wherein the attribute comprises a flag structur e that enables the subsequent application to 
reject the embedded code within the XML document when the XML docviment is opened 
indicat e s r e jection of tho XML dooimi e nt by th e subs e qu e nt application . 
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1 6. (Currently Amended) The m e thod system of Claim 1 5, whereby if the embedded 

executable code associated with the attribute does not require rejection of the document, 
continuing to parse the XML markup of the document by the subsequent application. 

17. (Currently amended) The m e thod system of Claim 15, whereby parsing the XML 
markup by the subsequent application includes locating the executable code embedded in the 
document; 

determining by the subsequent application whether the attribute is present for notifying 
the subsequent application of the presence of the executable code; and 
if the attribute is not present, then rejecting the executable code. 

18. (Currently Amended) A computer-readable medium on which is stored 
instructions which when executed by a computer perform a method of detecting executable code 
embedded in an Extensible Markup Language (XML) document, comprising: 

applying Extensible Markup Language (XML) markup to a computer-generated 
document; 

locating an executable code embedded in the document; 

applying an attribute to a root level element of the XML markup for notifying a 
subsequent application of the presence of the embedded executable code wherein the attribute 
comprises a flag structur e that enables the subsequent application to reject the embedded code 
within the XML document when the XML document is opened indicat e s r e j e ction of th e XML 
docum e nt by th e subs e qu e nt application ; 

passing the document to the subsequent application; 

parsing the XML markup by the subsequent application to locate the attribute applied to 
the root level element of the XML markup applied to the document; and 

if the attribute is located by the subsequent application, rejecting the document as 
corrupted by the embedded executable coderaad 

e ls e if continuing to pars e th e XML docum e nt; 
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wh e r e by th e subs e qu e nt application is notifi e d of th e pr e s e nc e of th e e mb e dded 
e x e cutabl e cod e without th e subs e qu e nt application first parsing all e lem e nts of th e XML 
docum e nt prior to th e e mb e dd e d e x e cutable cod e. 

19. (Original) The computer readable medium of Claim 18, whereby if the embedded 
executable code associated with the attribute does not require rejection of the document, 
continuing to parse the XML markup of the document by the subsequent application. 

20. (Original) The computer readable medium of Claim 18, whereby parsing the 
XML markup by the subsequent application includes locating the executable code embedded in 
the document; 

determining by the subsequent application whether an attribute is present for notifying 
the subsequent application of the presence of the executable code; and 
if the attribute is not present, then rejecting the executable code. 
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